Name: mcp-tool-risk-score
Price: 0.02 USDC
Availability: InStock

$ man mcp-tool-risk-score

agentutility / agentops / mcp-tool-risk-score

PRICE / CALL

$0.02

USDC · base mainnet · scheme: exact

METHOD

POST

CLUSTER

agentops

CATEGORY

uncategorized

STATUS

● live

NAME

mcp-tool-risk-score — heuristic mcp tool risk review for an mcp tool manifest before you wire it into an agent

SYNOPSIS

POST https://x402.agentutility.ai/mcp-tool-risk-score
     Content-Type: application/json
     X-PAYMENT:    <signed-transferWithAuthorization>

     { ... }

↳ first call → 402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.

DESCRIPTION

Heuristic MCP tool risk review for an MCP tool manifest before you wire it into an agent. Send the tool definitions (name, description, inputSchema) plus optional deployment context and get back a mcp permission review with per-tool scores for permission scope, prompt-injection surface, and destructive-action risk, each with reasons, plus an overall tool security score. This is a heuristic pass over manifest text, not a formal security guarantee or penetration test, so treat low scores as 'looks lower-risk on paper', not 'certified safe'. Use it as an agent tool audit step in CI, an MCP catalog screening pass, or a quick second opinion before granting a new tool broad access.

INPUT — request schema

property	type	description	req?
tools	array	MCP tool manifest: a JSON array of tool definitions, each typically shaped {name, description, inputSchema}. Required, non-empty, max 50 entries, capped at 60,000 chars when serialized.	required
context	string	Optional deployment context, e.g. 'runs with a service account that has prod write access'. Max 500 chars.	optional

OUTPUT — response shape

field	type	description
heuristic	string	—
tools	string	—
overall_score	string	—
summary	string	—
model	string	—
source	string	—

EXAMPLES — two ways to call

EXAMPLE 1 · curl

curl -X POST https://x402.agentutility.ai/mcp-tool-risk-score \
  -H 'Content-Type: application/json' \
  -d '{ }'

first response = 402 Payment Required with payment requirements; sign + retry with X-PAYMENT.

EXAMPLE 2 · mcp

# Install the MCP package for this endpoint's cluster
npx -y @agentutility/mcp-<cluster>

# Required: EVM private key with USDC on Base
export X402_PRIVATE_KEY=0x...

# Then call the mcp-tool-risk-score tool from your MCP-aware agent.

MCP server handles payment automatically — your coding agent just calls the tool by name.

METADATA

tags: agentopsmcptoolriskscoremcp-tool-risk-score
methods: POST
cluster: agentops
price: $0.02 USDC per call

ADJACENT — other endpoints in agentops

endpoint	description	price
agent-trace-brief	Turns a raw agent execution trace into a readable agent trace summary: an ordered step-by-step account of what the agent did, where it br…	$0.02
eval-case-generate	Eval case generator for an agent or LLM task: describe the task and get back a draft llm eval dataset of {input, expected, rubric} cases…	$0.02
tool-call-diff	Deterministic tool call diff between two agent run sequences.	$0.008